Systems and methods for negotiating and enforcing access to network resources

• US 20070136471A1
• Filed: 12/12/2005
• Published: 06/14/2007
• Est. Priority Date: 12/12/2005
• Status: Abandoned Application

• Current Assignee: Second Rule LLC
• Original Assignee: IP3 Networks Incorporated (Second Rule LLC)
• Inventors: Jardin, Cary
• Application Number:
  US11/299,646
• Publication Number:
  US 20070136471A1
• Time in Patent Office: Days
• US Class Current: 709/226
• CPC Class Codes: H04L 41/5054 Automatic deployment of services triggered by the service manager, e.g. service implementation by automatic configuration of network components
• CPC Class Codes: H04L 41/5093 wherein the managed service relates to messaging or chat services
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

In network access devices configured to provide a client device an Internet Protocol (IP) address when a client device attempts to access the network associated with the network access device. The client device can then provide its credentials to the network access device. The network access device can then “shop” credentials to plurality of servers interfaced with the network. The plurality of servers will then respond to the network access device indicating what services and resources are available to the client device based on the credentials provided. The network access device can inform the client device of the services and resources available. If the client device accepts some or all of the services and resources available, then the network access device can enforce the restrictions and availability of the services and resources agreed to.

Claims

1. In a network comprising a plurality of client devices, a plurality of servers configured to make services and resources available to the plurality of client devices, and a network access device configured to interface the plurality of client devices with the plurality of servers, a method for providing the services and resources to the client devices, comprising the network access device:

receiving credentials from one of the plurality of client devices;

shopping the received credentials to the plurality of servers;

receiving from the plurality of servers the services and resources that are available to the client device based on the credentials; and

enforcing the available services and resources.

2. The method of claim 1, further comprising informing the client device of the services and resources available, and receiving an indication from the client devices as to whether the client device accepts the available services and resources.

3. The method of claim 2, further comprising, when the client device does not accept the available services and resources, receiving new credentials from the client device.

4. The method of claim 3, further comprising shopping the new credentials to the plurality of servers, and receiving new services and resources available to the client device based on the new credentials.

5. The method of claim 4, further comprising informing the client device of the new services and resources and receiving an indication from the client device as to whether the client device accepts the new services and resources.

6. The method of claim 3, further comprising suggesting changes to the client device'"'"'s credentials when informing the client device of the available services and resources.

7. The method of claim 6, wherein the new credentials received form the client device are based on the suggested changes.

8. The method of claim 7, wherein the network access device communicates with the client device using natural language messaging.

9. A network access device configured to interface a plurality of client devices with a plurality of servers, the network access device comprising:

a memory configured to store instructions;

a processor configured to access the instructions, the instructions configured to cause the processor to

receive credentials from one of the plurality of client devices;

shop the received credentials to the plurality of servers;

receive from the plurality of servers the services and resources that are available to the client device based on the credentials; and

enforce the available services and resources.

10. The network access device of claim 9, wherein the instructions are further configured to cause the processor to inform the client device of the services and resources available, and receive an indication from the client devices as to whether the client device accepts the available services and resources.

11. The network access device of claim 10, wherein the instructions are further configured to cause the processor to, when the client device does not accept the available services and resources, receive new credentials from the client device.

12. The network access device of claim 11, wherein the instructions are further configured to cause the processor to shop the new credentials to the plurality of servers, and receive new services and resources available to the client device based on the new credentials.

13. The network access device of claim 12, wherein the instructions are further configured to cause the processor to inform the client device of the new services and resources, and receive an indication from the client device as to whether the client device accepts the new services and resources.

14. The network access device of claim 11, wherein the instructions are further configured to cause the processor to suggest changes to the client device'"'"'s credentials when informing the client device of the available services and resources.

15. The network access device of claim 14, wherein the new credentials received form the client device are based on the suggested changes.

16. The network access device of claim 9, further comprising a natural language processor, and wherein the instructions are further configured to cause the natural language processor to communicate with the client device using natural language messaging.